SentinelOps is published as an academic and portfolio lab. It is not a production baseline and must not be deployed in real environments without hardening, secret rotation, TLS review, network controls and a backup policy adapted to the organization.
- real credentials, passwords, tokens or client secrets;
- private keys, SSH keys or private certificates;
- real
.envfiles; - database dumps, backup archives or Restic repositories;
- cookies, sessions or browser exports;
- logs containing sensitive data;
- screenshots showing secrets, private URLs or personal data;
- unfiltered academic evidence packages.
If you detect a security problem in this public package, contact the author through:
- GitHub: https://github.com/Jyzzu08
- Portfolio: https://www.jesusmanzanero.info/
- LinkedIn: https://www.linkedin.com/in/jes%C3%BAs-david-manzanero-marti-995010232
Do not open a public issue with secret values. Report only the affected path, type of issue and reproduction context.
- Copy
.env.examplefiles to.envlocally and keep them outside Git. - Generate unique credentials for every deployment.
- Use real TLS and trusted certificates outside the lab.
- Restrict administrative dashboards by network and identity controls.
- Validate backups with non-destructive restores.
- Review every screenshot and evidence file before publication.